2013 CVE Vulnerabilities
6,836 CVEs published in 2013.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2013-20009 | MEDIUM | 4.8 | 0.2% | Oct 28, 2026 | Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers... |
| CVE-2013-20008 | MEDIUM | 6.8 | 0.3% | Oct 28, 2026 | Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administra... |
| CVE-2013-20007 | HIGH | 7.2 | 2.0% | Oct 28, 2026 | Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to ex... |
| CVE-2013-10077 | MEDIUM | 5.3 | 0.4% | Oct 26, 2026 | A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octoprint/serve... |
| CVE-2013-10076 | HIGH | 7.5 | 0.2% | Oct 10, 2026 | ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT type... |
| CVE-2013-1446 | — | — | — | Sep 14, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Was assigned for an old issu... |
| CVE-2013-10075 | CRITICAL | 9.1 | 0.4% | May 8, 2026 | Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::... |
| CVE-2013-10056 | — | — | — | Apr 22, 2026 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. |
| CVE-2013-10045 | — | — | — | Apr 22, 2026 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. |
| CVE-2013-10041 | — | — | — | Apr 22, 2026 | Rejected reason: This CVE has the been REJECTED and will not be published by the CNA. |
| CVE-2013-20006 | HIGH | 8.7 | 0.4% | Mar 16, 2026 | Qool CMS contains multiple persistent cross-site scripting vulnerabilities in several administrative scripts where POST ... |
| CVE-2013-20005 | MEDIUM | 6.9 | 0.2% | Mar 16, 2026 | Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative act... |
| CVE-2013-10031 | HIGH | 7.5 | 0.2% | Dec 9, 2025 | Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks |
| CVE-2013-10074 | MEDIUM | 5.4 | 0.4% | Oct 30, 2025 | Nagios XI versions prior to 2012R2.6 are vulnerable to cross-site scripting (XSS) via the Tools Menu of the web interfac... |
| CVE-2013-10073 | HIGH | 8.8 | 3.4% | Oct 30, 2025 | Nagios XI versions prior to 2012R1.6 contain a shell command injection vulnerability in the Auto-Discovery tool. User-co... |
| CVE-2013-10072 | MEDIUM | 6.5 | 0.8% | Oct 30, 2025 | Nagios XI versions prior to 2012R1.6 contain an authorization flaw in the Auto-Discovery functionality. Users with read-... |
| CVE-2013-10071 | MEDIUM | 6.1 | 0.6% | Oct 30, 2025 | Nagios XI versions prior to 2012R1.6 contain a reflected cross-site scripting (XSS) vulnerability in the dashboard dashl... |
| CVE-2013-10070 | CRITICAL | 10 | 1.4% | Aug 5, 2025 | PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names a... |
| CVE-2013-10069 | CRITICAL | 9.8 | 11.9% | Aug 5, 2025 | The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an ... |
| CVE-2013-10068 | CRITICAL | 9.4 | 0.9% | Aug 5, 2025 | Foxit Reader versions through 5.4.5.0114, including the bundled Foxit Reader Plugin 2.2.1.530, contains a stack-based bu... |
| CVE-2013-10067 | CRITICAL | 9.4 | 1.0% | Aug 5, 2025 | Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a... |
| CVE-2013-10066 | CRITICAL | 10 | 1.4% | Aug 5, 2025 | An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an uplo... |
| CVE-2013-10065 | HIGH | 7.5 | 1.1% | Aug 5, 2025 | A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH ... |
| CVE-2013-10064 | CRITICAL | 9.3 | 1.3% | Aug 5, 2025 | A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fa... |
| CVE-2013-10054 | CRITICAL | 9.3 | 1.6% | Aug 4, 2025 | An unauthenticated arbitrary file upload vulnerability exists in LibrettoCMS version 1.1.7 (and possibly earlier) contai... |
Check if your code is affected by 2013 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now